Cisco 1000 Series Aggregation Services Routers (ASR 1000)
Score 8.9 out of 10
N/A
The Cisco 1000 Series Aggregation Services Routers (ASR 1000) is a SD-WAN ready router.
N/A
FortiGate
Score 8.7 out of 10
N/A
FortiNet FortiGate is a firewall option with high integrability. It offers a variety of deployment options and next-gen firewall capabilities, including integration with IaaS cloud platforms and public cloud environments.
N/A
Pricing
Cisco 1000 Series Aggregation Services Routers (ASR 1000)
Fortinet FortiGate
Editions & Modules
No answers on this topic
No answers on this topic
Offerings
Pricing Offerings
Cisco 1000 Series Aggregation Services Routers (ASR 1000)
FortiGate
Free Trial
No
Yes
Free/Freemium Version
No
No
Premium Consulting/Integration Services
No
No
Entry-level Setup Fee
No setup fee
No setup fee
Additional Details
—
FortiGate pricing starts at $250 for home office use, up to $300,000 for large enterprise appliances.
Must contact sales team for pricing.
Cisco ASA is [a] good product but you can't say this is providing the security from every points. Lots of features are missing in Cisco ASA but Fortinet [FortiGate] is fully loaded and all the advanced features are available for secure your company.
Cisco 1000 Series Aggregation Services Routers (ASR 1000)
Fortinet FortiGate
Likelihood to Recommend
Cisco
- It is well suited for companies that have a big WAN environment, this devices can fit in there easily and have multiple provider circuits. - Well suited for private cloud environments where multi tenancy is required, - Device can be used as IPN/ISN device as it supports jumbo frames for an ACI multi-site/remote leaf deployment. - Device is well suited for branches that have their own DIA and MPLS circuits.
For FortiGate Firewall, the basic functionality and requirement is met easily as Fortigate is among market leaders in NGFW. There are some extra points that inclined us to use Fortigate as our main Firewall. [Fortinet]Fortigate has a very well refined and functional SD-WAN solution when it comes to load balancing for normal Internet Traffic. SD-WAN - Load balancing of Internet traffic is a USP of Fortigate and makes it stand tall in the competition. Be it 3 or more Internet Links, multiple Subnets/segments of users to distribute and bandwidth load balancing for links and users. SLA based monitoring of Internet Links / MPLS links, makes it even better to choose the links on the basis of performance (Latency, packet loss, Jitter etc). SSL VPN configuration - The deep CLI-level debugging is also very helpful in troubleshooting. Type of tunnel can be easily configured - Full Tunnel or Split Tunnel for SSL. Though, I think Fortigate is one of the best options for small and mid-sized organizations, there are some areas for improvement. First, the CLI interface is very hard to adapt as the commands and directory hierarchy is very different for common syntax and standards.
The ASR 1000 series routers can, as with most devices, improve with additional memory capacity and upgraded chip sets for faster processing.
There seems to be limitations on the number of routing sessions the smaller ASR devices can handle, which can be overcome with proper planning and placement within the network.
When we switched to Fortinet Fortigate, it took some time getting used to and become familiar with the new interface. Being used to strictly command-line interfaces, a full GUI-based firewall was something brand new. Careful planning had to be done when creating rules to ensure we didn't miss anything. However, once we got used to the new GUI interface, going from one Fortinet product to another was simple, as Fortinet used the same interface for all of its devices.
The device without a doubts performs at the level required and expected, we can renew it and use it as we have been using it for years. The device can be used as DCI, IPN/ISN, or even private cloud for customer circuit handoff, it also supports IPSec properly. The device is well suited in multiple segments of the network.
Fortinet's products have kept improving with new software releases and they continue to deliver great value. Their support is also very good. I believe that as a small enterprise, their products have given us competitive advantage delivering features and functionality that enable us to innovate and do things better. They also continue to be a leader in the markets they serve.
All our modular contingency service exercises use this equipment, it allows us to perform this type of exercises very easily, in a controlled and effective way. It is used at least once a month for these types of events. It also allows configuration replication in computers that are under the same model.
The user interface shared among many simultaneous users is very easy to get around. With shared favorites among users, most tasks are easily bookmarked and can quickly be found and edited. Their strategy for web filter integration is easy to understand and manage as well. With some general direction, setup and maintenance were easy to do and easy to teach others in the organization to do as well.
We have received training on the equipment, which has made us add more networks on our own, we provide first level support, we validate the publication of the equipment and we can satisfy the needs of our internal clients in terms of the prompt recovery of the affected services
We live in Turkey. Fortinet's Turkey office [dealt] constantly with us in our every problem or our experience. In addition, global support teams also supported every ticket we opened in every problem we encountered. They support innovative approaches and evaluate and offer solutions. In this context, they were very supportive of the problems we encountered in previous versions.
Before standardizing on the Cisco ASR 1000 we had explored the idea of using Juniper routers. Ultimately we felt the Cisco ASR 1000 was a better fit at the time. We have been very happy with this decision, but it might not be the right decision for everyone. It fit our environment and our needs very well, Juniper is also a very good choice.
[Fortinet] FortiGate is not only cost effective but it gives the comprehensive security against the APT attacks and gives the complete traffic visibility and granular control. You can easily create the VDOMs (Virtual firewall) within a Fortigate firewall and customize the dashboard as per your requirement if you have multiple VDOMs within a single firewall.
It is a healthy return on investment with planned packed size data. Average unicast latency is low and consistent with small and large packets (barring mid-sized).
Cisco devices last longer and also have a decent trade-in policy to recover some value when equipment is replaced.
Higher concurrent IPSec tunnels are offered, we tested for 1500+, fielding both encrypted and a mix of encrypted and cleartext traffic.
Fortigates have an interesting bundle model for support and subscription services that make it an attractive option to deploy Firewall, IDS, Ant-virus, anti-SPAM in a single device. The cost of the bundle is pretty much what you pay for the device, not requiring huge expenditures on it's time to renew the hardware.
